# flabs v1.0.0 — pi SDK powered physics playground
TL;DR: Complete rewrite. Browser-only agent removed, server-side pi SDK agent in. Private accounts. Private spaces.
## What changed
Before: Browser-only AI agent with hand-rolled provider configs. API key in browser → direct to OpenAI/Anthropic. Server saw nothing. Fragile — every provider had to be implemented separately.
After: pi SDK agent loop on the server. Provider list from pi SDK ModelRegistry (35+ providers, auto-maintained). Browser is just a UI bridge.
## Private accounts
- Recovery code instead of email/password
- HttpOnly session cookie (SameSite=Strict, Secure)
- API key never in localStorage — only in sessionStorage, for one agent turn only
- Private spaces: nobody but you can see them
## Agent can build
The pi SDK agent runs with 3 custom tools:
space_read_file— read sketch.js, index.html, experiment.json, sources.jsonspace_write_file— write new lab filesspace_list_files— list allowed files
No shell. No network. No CDN scripts.
## Caveat (demo)
Runs on Render Free → no persistent disk → accounts/spaces are temporary. Upgrade to Starter ($7/mo) + Persistent Disk = everything sticks.
## Tech
- pi SDK
@earendil-works/pi-coding-agent(runtime) - Express + pi SDK agent loop
- Typebox for custom tool schemas
- Render + GitHub auto-deploy
## Links
Log in or sign up for Devpost to join the conversation.